CentOS 8 : keepalived (CESA-2022:1930)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:1930 advisory. - keepalived: dbus access control bypass CVE-2021-44225 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : compat-exiv2-026 (CESA-2022:1797)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:1797 advisory. - exiv2: stack exhaustion issue in the printIFDStructure function may lead to DoS CVE-2020-18898 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : fapolicyd (CESA-2022:1898)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1898 advisory. - fapolicyd: fapolicyd wrongly prepares ld.so path CVE-2022-1117 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : qt5-qtsvg (CESA-2022:1920)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1920 advisory. - qt: out-of-bounds write may lead to DoS CVE-2021-45930 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : libtiff (CESA-2022:1810)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1810 advisory. - libtiff: a buffer overflow via the invertImage may lead to DoS CVE-2020-19131 Note that Nessus has not tested for this issue but has instead relied only on th...

CentOS 8 : maven:3.5 (CESA-2022:1861)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:1861 advisory. - apache-httpclient: incorrect handling of malformed authority component in request URIs CVE-2020-13956 Note that Nessus has not tested for this issue but has...

CentOS 8 : qt5-qtbase (CESA-2022:1796)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1796 advisory. - qt: out-of-bounds write in QOutlineMapper::convertPath called from QRasterPaintEngine::fill and QPaintEngineEx::stroke CVE-2021-38593 Note that Nessus has not...

CentOS 8 : cockpit (CESA-2022:2008)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:2008 advisory. - cockpit: pages vulnerable to clickjacking CVE-2021-3660 - cockpit: authenticates with revoked certificates CVE-2021-3698 Note that Nessus has not...

CentOS 8 : python27:2.7 (CESA-2022:1821)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1821 advisory. - python: urllib: Regular expression DoS in AbstractBasicAuthHandler CVE-2021-3733 - python: urllib: HTTP client possible infinite loop on a 100 Contin...

CentOS 8 : python39:3.9 and python39-devel:3.9 (CESA-2022:1763)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1763 advisory. - python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through CVE-2021-43818 Note that Nessus has not tested for this issue but has instea...

CentOS 8 : xorg-x11-server and xorg-x11-server-Xwayland (CESA-2022:1917)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1917 advisory. - xorg-x11-server: SProcRenderCompositeGlyphs out-of-bounds access CVE-2021-4008 - xorg-x11-server: SProcXFixesCreatePointerBarrier out-of-bounds acces...

CentOS 8 : udisks2 (CESA-2022:1820)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1820 advisory. - udisks2: insecure defaults in user-accessible mount helpers allow for a DoS CVE-2021-3802 Note that Nessus has not tested for this issue but has instead relie...

CentOS 8 : dovecot (CESA-2022:1950)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1950 advisory. - dovecot: plaintext commands injection CVE-2021-33515 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : httpd:2.4 (CESA-2022:1915)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1915 advisory. - httpd: Single zero byte stack overflow in modauthdigest CVE-2020-35452 - httpd: Request splitting via HTTP/2 method injection and modproxy...

CentOS 8 : pki-core:10.6 (CESA-2022:1851)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1851 advisory. - JSS: memory leak in TLS connection leads to OOM CVE-2021-4213 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : gnome-shell (CESA-2022:1814)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:1814 advisory. - gnome-shell: Password from logged-out user may be shown on login screen CVE-2020-17489 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : virt:rhel and virt-devel:rhel (CESA-2022:1759)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1759 advisory. - QEMU: block: fdc: null pointer dereference may lead to guest crash CVE-2021-20196 - ntfs-3g: Out-of-bounds heap buffer access in ntfsgetattributevalu...

CentOS 8 : go-toolset:rhel8 (CESA-2022:1819)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1819 advisory. - golang: Command-line arguments may overwrite global data CVE-2021-38297 - golang: archive/zip: malformed archive may cause panic or memory exhaustion...

CentOS 8 : cairo and pixman (CESA-2022:1961)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1961 advisory. - cairo: libreoffice slideshow aborts with stack smashing in cairo's compositeboxes CVE-2020-35492 Note that Nessus has not tested for this issue but has instea...

CentOS 8 : container-tools:rhel8 (CESA-2022:1762)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1762 advisory. - psgo: Privilege escalation in 'podman top' CVE-2022-1227 - prometheus/clientgolang: Denial of service using InstrumentHandlerCounter CVE-2022-21698 -...